Staff & roles

Invite team members and assign roles. Only super admins can manage staff.

MemberEmailRoleStatusAdded
MCA Michaelmichael@ekrpt.comSUPER ADMINActiveOwner
Roster shows the owner only until staff management is wired (enum: user · staff · admin · super_admin).

Role permissions

What each role can access. Enforced server-side via the staff role on every privileged edge function.

SUPER ADMIN
Everything: pricing, staff, payouts, growth config, audit. The owner.
ADMIN
All operations except staff management and dangerous settings.
FINANCE
Payouts, partner earnings, promo codes, pricing. No staff control.
EDITOR
Blog/content, services catalog copy. No money or user data.
SUPPORT
View users & orders, issue refunds within limits. Read-mostly.

Audit log

Every privileged action, recorded. Append-only — coda.audit_log.

WhenActorActionTarget
Audit entries appear here once the admin_audit_log read RPC is wired to coda.audit_log.